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CLAIMS 

■ 

1. A filter for filtering electronic messages, said filter comprising: 

- storage space for an allowed list comprising Identification insignlas of senders 
which have been approved for sending messages to a recipient, 

- means for receiving a first electronic message from a sender, 

- means for capturing from the message an Identification insignia of the sender, 

- means for capturing from the message an Identification Insignia of the recipient, 

- first check means for comparing the identification Insignia with the allowed list for 
determining either to withhold the message or to forward the message to the 
recipient, 

- means for storing the message' and insignia, 

- means for generating a return message to the sender In case the identification 
Insignia is not included in the allowed list, the means for returning the message 
being adapted to include In the returned message a unique code, and a message 
for the sender to reply to the returned message by sending It baci< without 
changing the unique code, 

- means for storing the unique code and relating It to the Insignia, and 

- second checl< means for receiving a second electronic message and for 
recognising the second message being a reply to the returned message, 

characterised In that the filter further comprises: 

- prioritising means which. In response to recognition of the second message being 
a reply to the returned message, assigns a priority to each of the Identification 
insignlas of the senders of the first messages, and 
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- means for selecting Identification inslgnias and adding the selected insignias to 

« 

tlie allowed list, wherein the means for selecting are adapted to carry out the 
selection according to the priorities assigned to the Identification insignias. 

2. A filter according to claim 1, wherein the second check means performs the recognition by: 

5 - capturing in the second message the unique code, and a second identification 

insignia of the sender of the second message, and 

- checking that the unique code has not changed, and that the second 
Identification Insignia corresponds to the first identification insignia. 

3. A filter according to claim 1 or 2, further comprising means for capturing from a server a 
10 list comprising at least one address from which the sender has access to send messages 

from. 

4. A filter according to claim 3, further comprising means for checking that the sender Is 
sending from an address included in the list. 

5. A filter according to any of the preceding claims, further comprising means for generating 
15 a predict allowed list comprising identification Insignias of third party message recipients 

Included by the sender In the first or the second electronic message. 

6. A filter according to any of the preceding claims, further comprising rule based selection 
means which, based on recognition of a specific pattern in the content of the message sets 
the priority of the Identification insignias. 

20 7. A filter according to any of the preceding claims, further comprising means for 

automatically selection of insignias with priorities above a predetermined value for the 
allowed list. 

8. A filter according to any of the preceding claims, wherein the Identification Insignias of the 
senders and the data Identifying the sender include at least a domain Identification of the 

25 sender's electronic mall address, 

« 

9. A filter according to any of the preceding claims, further comprising means for withholding 
the electronic message from final delivery to the Intended recipient until an administrator has 
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accepted delivery of the message to the recipient, the administrator being one of a human 
administrator, a software-implemented administrator, and the recipient of the message. 

10. A filter according to any of the preceding claims, further comprising storage for a black- 
list, and means for checldng occurrence of an Identification Insignia in the black-list prior to 

5 comparing the identification Insignia with the allowed list. 

11. A filter according to any of the preceding claims, comprising means for communicating, in 
an SMTP message, and in response to receiving the message from a sender with an insignia 
not included In the allowed list or optionally, with an Insignia included in the black-list, that 
the message could not be delivered to the recipient. 

12. A filter according to claim 11, comprising counting means for counting a number of 
reoccurrences of identical messages being received, and for adding the insignia of the sender 
of such messages which reoccur more than a pre-specified number of times to the black-list. 

13. A filter according to any of the preceding claims, comprising means for adding to the 
allowed list, insignlas of potential senders to whom the recipient has previously been sending 
messages. 

14. A filter according to any of the preceding claims, comprising means for measuring a 
frequency of messages to and from a specific sender, and upon detection of frequencies 
above a pre-specified level, for forwarding the first message to the recipient irrespective if 
the Insignia of the sender is not in the allowed list. 

■ 

20 15. A filter according to any of the preceding claims, wherein the means for generating a 
return message to the sender Is adapted to send the return message by use of an 
identification insignia corresponding to the identification insignia of the Intended recipient of 
the first message. 

16. A method for filtering electronic messages, said method comprising the steps of: 

25 - assigning space In a computer system for a list comprising Identification insignlas 

of senders which have been approved for sending messages to a recipient, 

- receiving a first electronic message from a sender, 

- capturing from the message an identification insignia of the sender. 
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- capturing from the message an Identification insignia of the recipient, 

- comparing the Identification insignia with the allowed list for determining either to 
withhold the message or to forward the message to the recipient, 

- storing the message and insignia in a storage space of the computer system, 

- generating a return message to the sender in case the identification insignia is not 
included in the allowed list, and Including in the returned message a unique code, 
and a message for the sender to reply to the return message by sending It back 
without changing the unique code, 

- storing the unique code and relating it to the insignia, and 

- receiving a second electronic message and recognising the second message being 
a reply to the returned message, 

characterised in that the method comprises the steps of: 

- In response to recognition of the second message being a reply to the returned 
message, assigning a priority to each of the Identification Inslgnlas of the senders 
of the first messages, and 

- selecting Identification insignlas and adding the selected Inslgnlas to the allowed 
list, wherein the selecting is carried according to the priorities assigned to the 
identification inslgnlas. 



